dt33 Privacy Policy
— How We Handle Your Personal Data

01 Overview

This Privacy Policy (hereinafter "the Policy") sets out the manner in which dt33 (hereinafter "dt33", "we", "us", or "the Platform") collects, processes, stores, shares, and protects personal data relating to registered users and visitors of the dt33 website at dt33.io and any associated mobile-optimised interfaces.

dt33 is an online entertainment platform providing sports betting, live casino gaming, slots, and related payment and account services to adult players in Bangladesh. In the course of providing these services, dt33 necessarily collects and processes certain categories of personal data. We are committed to handling that data responsibly, transparently, and in accordance with applicable data protection principles.

This Policy applies to all personal data processed by dt33 in connection with the provision of its services, regardless of whether such data is provided directly by the user, collected automatically through platform interactions, or obtained from third-party partners in the course of delivering our services.

02 Data Controller

For the purposes of this Privacy Policy, dt33 acts as the data controller in respect of personal data collected through the dt33 platform. As data controller, dt33 determines the purposes for which and the means by which personal data is processed.

All data protection enquiries, access requests, and complaints relating to the handling of personal data by dt33 should be directed to the dt33 support team at [email protected]. We are committed to responding to all data protection communications in a timely manner and in accordance with the principles described in this Policy.

03 Categories of Personal Data We Collect

dt33 collects the following categories of personal data from registered players and platform visitors:

3.1 Identity and Contact Data

• Full legal name (as it appears on official identification documents)
• Date of birth
• Residential address in Bangladesh (street, city, district, postcode)
• Email address
• Mobile phone number
• National Identity Card (NID) number or passport number (collected during KYC verification)

3.2 Financial and Transaction Data

• Mobile wallet account identifiers (bKash, Nagad, Rocket, Upay numbers)
• Bank account details where bank transfer is used (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank)
• Transaction history including deposit amounts, withdrawal requests, and processing timestamps
• Account balance history and betting stake records

3.3 Account and Gaming Activity Data

• dt33 username and encrypted password hash
• Betting history across all sportsbook markets (cricket, football, kabaddi, and other events)
• Casino and slots session data, including game titles played, stakes placed, and session durations
• Bonus and promotion redemption history
• Responsible gaming settings and limits applied to your account
• Customer support communications and complaint records

3.4 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Session timestamps, page interaction logs, and navigation paths within the platform
• Cookie identifiers and similar tracking technologies (see Section 10)

3.5 Verification and Compliance Data

• Copies of identity documents submitted for KYC verification (NID, passport, proof of address)
• Selfie or liveness check images where enhanced verification is required
• Source of funds declarations where requested for anti-money-laundering compliance purposes

04 How We Collect Personal Data

dt33 collects personal data through the following primary channels:

• Direct submission: Data you provide when completing the dt33 registration form, updating your account profile, submitting KYC documents, initiating deposit or withdrawal transactions, or contacting customer support.
• Automated platform interactions: Data collected automatically as you navigate and interact with the dt33 website, including server log files, session cookies, device fingerprinting, and analytical event tracking.
• Payment service providers: Transaction confirmation data and payment method identifiers received from bKash, Nagad, Rocket, Upay, and bank partners in the course of processing deposits and withdrawals.
• Game providers: Session and outcome data received from certified game providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi as part of the live casino and slots service.
• Identity verification services: Where dt33 engages a third-party KYC verification partner to authenticate identity documents, that partner will transmit a verification result and associated document data to dt33.
• Fraud prevention and compliance tools: Risk scoring and device reputation data from third-party fraud detection services used to protect the integrity of the dt33 platform and its players.

05 How We Use Your Personal Data

dt33 processes your personal data strictly for the following defined purposes. We do not use personal data for any purpose incompatible with those stated below without first seeking your explicit consent:

06 Legal Basis for Processing

dt33 processes personal data on the basis of one or more of the following lawful grounds:

• Contractual necessity: Processing required to perform the contract between dt33 and the registered player, including account operation, bet placement, payment processing, and KYC verification. Without this processing, dt33 cannot provide its services.
• Legal obligation: Processing required to comply with applicable anti-money-laundering obligations, financial record-keeping requirements, and any lawful requests from competent regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out for dt33's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided such interests are not overridden by your privacy rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent, primarily in the context of direct marketing communications. You may withdraw consent at any time without affecting the legality of prior processing.

07 How We Share Personal Data

dt33 does not sell personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for each stated purpose:

7.1 Payment Service Providers

To process deposits and withdrawals, dt33 shares necessary transaction data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. Each of these partners processes data under their own privacy terms as independent data controllers for payment processing purposes.

7.2 Game and Software Providers

To deliver the live casino and slots experience, session data is shared with certified game providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. Game providers receive the minimum data necessary to authenticate your session and record game outcomes.

7.3 Identity Verification Partners

Where dt33 uses a third-party KYC service provider to verify identity documents, that provider will process copies of your identification documents on dt33's behalf under a data processing agreement that requires them to handle your data with the same level of care as dt33 itself.

7.4 Fraud Prevention and Security Services

Technical and transaction data may be shared with fraud detection service providers operating on dt33's behalf to identify suspicious activity, protect player accounts, and maintain platform integrity.

7.5 Legal and Regulatory Disclosure

dt33 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or in connection with the prevention or detection of criminal activity including money laundering.

08 Data Retention

dt33 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by law. The following indicative retention periods apply:

• Active account data: Retained for the full duration of the account relationship and for a minimum of five years following permanent account closure.
• KYC and identity verification documents: Retained for a minimum of five years from the date of submission, in accordance with anti-money-laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction, consistent with financial record-keeping obligations.
• Customer support communications: Retained for three years from the date of the final communication in each support thread.
• Technical and analytics data: Aggregated and anonymised analytics data may be retained indefinitely. Raw technical logs are retained for up to 12 months from creation.
• Marketing consent records: Retained for the duration of the consent period and for two years following withdrawal of consent, as evidence of lawful prior processing.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to any identifiable individual.

09 Security Measures

dt33 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your browser or device and the dt33 platform, including the login interface, cashier, account management area, and game sessions.
• Password hashing using a strong, salted cryptographic algorithm. dt33 never stores account passwords in plain text.
• Access controls limiting internal access to personal data to authorised personnel who require that access to perform defined operational functions.
• Firewalls and intrusion detection systems protecting the dt33 server infrastructure from external attack.
• Regular security assessments of the platform and its data processing infrastructure.
• Data minimisation practices ensuring that only the minimum personal data necessary for each purpose is collected and retained.

While dt33 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and interests, dt33 will notify affected users without undue delay and will take all appropriate remedial action.

10 Cookies & Tracking Technologies

The dt33 platform uses cookies and similar tracking technologies to enable core platform functionality, improve user experience, and gather analytical data about how the platform is used. The following categories of cookies are used by dt33:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional cookies: Used to remember your preferences and settings, such as your preferred language, display settings, and responsible gaming limits, so that you do not need to re-enter them on each visit.
• Analytical cookies: Used to collect aggregated, anonymised data about how players interact with the dt33 platform, which pages are visited most frequently, and how navigation flows are used. This data helps dt33 improve the platform experience over time.
• Performance cookies: Used to monitor platform load times, server response rates, and error rates so that dt33 can maintain and optimise platform performance for users across Bangladesh.

dt33 does not use third-party advertising or behavioural profiling cookies. All cookies set by the dt33 platform serve operational or analytical purposes directly related to platform functionality and improvement.

You may configure your browser to block or delete cookies; however, doing so may impair core platform functionality, including your ability to log in, maintain a session, or access account features. For instructions on managing cookies in your specific browser, please consult your browser's help documentation.

11 Your Data Rights

As a registered dt33 player, you hold the following rights in respect of your personal data. To exercise any of these rights, submit your request to [email protected] with sufficient detail to identify your account and the specific right you wish to exercise. dt33 will acknowledge your request within five business days and will respond substantively within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data dt33 holds about you and to receive information about how that data is processed.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. You may also update certain data directly through your Account Settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal retention obligations.
• Right to Restriction of Processing: You have the right to request that dt33 restrict its processing of your data in certain circumstances, such as while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including processing for direct marketing purposes. An objection to marketing will be honoured immediately; other objections will be assessed against dt33's legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

12 Minors & Age Policy

The dt33 platform is strictly restricted to individuals aged 21 years and above. dt33 does not knowingly collect, process, or retain personal data from any person under the age of 21. All registration applicants are required to confirm that they meet the minimum age requirement at the time of registration.

Where dt33 identifies or is notified that a registered account is held by a person under the age of 21, all personal data associated with that account will be deleted as promptly as technically feasible, the account will be permanently closed, and all balances will be forfeited. If you believe that dt33 may have inadvertently collected data from an underage individual, please notify us immediately at [email protected].

13 Changes to This Privacy Policy

dt33 reserves the right to update or amend this Privacy Policy at any time. Where a proposed change materially affects the way in which your personal data is processed, dt33 will provide advance notice of the change via the email address registered to your dt33 account, no less than seven days before the amended Policy takes effect.

For minor amendments — including typographical corrections, formatting updates, or clarifications that do not alter the substance of any provision — dt33 may update the Policy without advance notice. All versions of this Policy display the effective date at the top of the document. We encourage you to review this Policy periodically to remain informed about how dt33 handles your personal data.

Continued use of the dt33 platform following the effective date of any amendment to this Privacy Policy constitutes your acceptance of the amended terms.

14 Contact Us

All data protection enquiries, subject access requests, complaints, and privacy-related communications should be directed to the dt33 support team using the contact details below:

• Data Protection Contact: [email protected] (plain text — not a clickable link)
• Response Time: dt33 acknowledges all data protection communications within five business days Bangladesh Standard Time (BST, UTC+6).
• Language: All data protection communications are handled in English.

If you are dissatisfied with dt33's response to a data protection complaint, you have the right to escalate the matter to the relevant data protection authority or competent regulatory body in your jurisdiction. dt33 will co-operate fully with any such authority in the resolution of complaints.